Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: r+6T9XRd32xWSSMticw/O0MvX2p3fv0CHFjjmK7idTg=
Subject key identifier: 56:92:E7:B7:E2:08:D3:D9:41:C7:38:2D:F4:9D:76:9E:07:30:82:30
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 019931C844D774E2CDEB799235C884B372D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 0988
Signing time: Wed 10 Sep 2025 04:00:32 +0000
Manifest this update: Wed 10 Sep 2025 04:00:32 +0000
Manifest next update: Thu 11 Sep 2025 04:00:32 +0000
Files and hashes: 1: jODSDZiB_9CDcQXiT4tsxNlR8Ac.roa (hash: JEMeTXjwzca2z04dyMlf/bVf4aF3EAXQNY7E1cjOdx4=)
2: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: hFXP4hbGrVQ0IdtPoDBtNUVqs3+jXw/1WJIuW8ZEtZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:44:d7:74:e2:cd:eb:79:92:35:c8:84:b3:72:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Sep 10 04:00:32 2025 GMT
Not After : Sep 11 04:00:32 2025 GMT
Subject: CN=5692e7b7e208d3d941c7382df49d769e07308230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9a:fb:91:1b:ad:9c:67:27:5f:fb:4f:1f:cd:
8c:28:e7:7a:9e:ad:0b:5e:38:62:f3:7e:13:67:d6:
89:d6:f2:ec:1d:49:27:49:ef:e7:cc:ef:d4:b4:36:
6e:30:e1:5f:f3:b1:40:a2:49:69:48:ce:4f:73:ba:
73:3d:b2:c4:ae:51:5d:03:43:9f:db:6f:26:17:a0:
e8:d3:14:03:e5:b9:dd:21:da:a9:31:4c:bd:75:7f:
78:7b:f7:e8:d0:be:fb:5c:fb:8f:4e:56:1e:c4:f0:
de:93:06:41:c0:be:96:cc:f3:52:4c:94:49:a4:6b:
ac:87:0d:46:08:36:48:56:b5:78:1a:fd:db:44:2e:
60:f4:2b:06:12:4c:24:4e:74:66:f7:7e:f7:c3:00:
25:1e:65:5f:df:b0:71:5c:66:31:f2:a1:5d:75:41:
2d:a2:6d:37:cb:c7:4c:34:0b:86:9a:d7:b1:17:fc:
e7:88:fe:1f:62:be:4f:a1:9b:f9:eb:16:b9:76:38:
56:ce:9f:b1:c3:0d:ef:f9:41:71:1d:0f:28:15:39:
79:ee:7f:91:aa:45:f6:b6:0c:f0:96:49:6a:38:83:
46:dc:f5:1e:30:5f:85:da:73:fa:c1:dd:c2:ac:09:
4c:d0:9a:f2:6a:cc:7d:84:6d:2b:18:a7:ab:ad:95:
67:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:E7:B7:E2:08:D3:D9:41:C7:38:2D:F4:9D:76:9E:07:30:82:30
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:48:c5:01:13:39:22:85:16:75:70:47:7e:f7:53:e9:f7:00:
3a:6e:9d:da:74:37:87:84:1e:54:e5:55:8b:77:5c:97:5e:cd:
c8:4c:2a:5f:62:a7:85:ab:7c:12:20:9d:47:6a:9b:60:b6:01:
2b:c0:33:93:53:97:b5:57:d2:60:1c:c2:2a:02:63:e5:81:d5:
a9:94:dd:68:0c:94:fb:95:30:3c:b4:6b:27:64:7d:fb:55:00:
29:ce:6f:25:55:c3:04:94:a1:a7:b0:43:4c:97:66:1c:28:cf:
4c:79:9a:6d:23:71:f1:48:5f:10:58:74:f0:84:de:b8:9a:fb:
4d:d2:a8:2f:05:e5:f2:16:26:c7:41:64:55:2b:16:fb:cb:84:
86:ee:0f:41:9c:a9:85:03:e7:7d:46:76:14:9b:af:1e:30:c7:
c3:03:4f:7a:a1:48:b2:bd:2e:fe:d6:9f:28:44:f3:73:f0:4f:
5b:99:4d:67:a5:62:f2:fc:a2:57:1a:03:a7:16:20:5b:f2:81:
c6:4d:54:f7:c5:c7:b6:b1:64:8d:ea:03:14:b8:dd:c4:c9:0d:
89:ce:00:2e:e6:e8:04:7c:f1:b8:bf:6c:69:9f:95:cb:ce:e6:
f7:31:82:ea:21:88:16:29:58:5a:41:bb:85:dc:c0:22:ff:42:
22:ea:cf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:17:18 2025 by rpki-client